IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.

« Log file content fields mongodb fields »

› ›

logstash fields

edit

IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

logstash fields

edit

logstash Module

logstash

edit

log

edit

Fields from the Logstash logs.

logstash.log.module

The module or class where the event originate.

type: keyword

logstash.log.thread

Information about the running thread where the log originate.

type: keyword

logstash.log.thread.text

type: text

logstash.log.log_event

key and value debugging information.

type: object

logstash.log.message

type: alias

alias to: message

logstash.log.level

type: alias

alias to: log.level

slowlog

edit

slowlog

logstash.slowlog.module

The module or class where the event originate.

type: keyword

logstash.slowlog.thread

Information about the running thread where the log originate.

type: keyword

logstash.slowlog.thread.text

type: text

logstash.slowlog.event

Raw dump of the original event

type: keyword

logstash.slowlog.event.text

type: text

logstash.slowlog.plugin_name

Name of the plugin

type: keyword

logstash.slowlog.plugin_type

Type of the plugin: Inputs, Filters, Outputs or Codecs.

type: keyword

logstash.slowlog.took_in_millis

Execution time for the plugin in milliseconds.

type: long

logstash.slowlog.plugin_params

String value of the plugin configuration

type: keyword

logstash.slowlog.plugin_params.text

type: text

logstash.slowlog.plugin_params_object

key → value of the configuration used by the plugin.

type: object

logstash.slowlog.level

type: alias

alias to: log.level

logstash.slowlog.took_in_nanos

type: alias

alias to: event.duration

« Log file content fields mongodb fields »